https://labs.ripe.net/author/anandb/dnssec-algorithm-roll-over/